$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/B9574A322C1311F0B642882AC4F9AE02.roa File: B9574A322C1311F0B642882AC4F9AE02.roa (raw, json) Hash identifier: 3BbSb2IhHmY4TC9+zwVnLHP/QzgOyZfeKreED1mPL28= Subject key identifier: 4F:2C:6F:6C:77:2F:1C:94:0F:7E:E7:D9:4F:09:0A:93:7B:E9:D9:F7 Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Certificate serial: 01AB Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/B9574A322C1311F0B642882AC4F9AE02.roa Signing time: Tue 27 Oct 2026 04:53:13 +0000 ROA not before: Tue 27 Oct 2026 04:53:12 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 138199 IP address blocks: 103.122.52.0/24 maxlen: 24 202.37.80.0/22 maxlen: 24 2001:df6:8d00::/48 maxlen: 48 2401:42a0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Validity Not Before: Oct 27 04:53:12 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae02e38-8767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:0a:07:5c:1a:8e:d7:04:f9:6d:b3:47:21: 51:ef:f4:79:03:ee:17:83:16:e9:ac:78:c6:b9:15: 73:b6:90:9f:17:7e:1a:61:33:43:50:36:80:fd:39: a3:f1:b0:92:35:99:1a:e4:03:68:71:19:40:f3:d6: 58:ba:fc:26:2b:51:09:d0:7c:6c:15:6e:6b:2a:39: f7:36:a8:19:40:95:ef:40:61:e0:8e:c2:a0:a2:77: 78:46:ff:87:52:dc:c4:e1:01:ac:da:2d:c6:01:06: 36:10:c7:b3:46:97:66:db:7f:7c:8f:8e:c0:32:27: 06:74:22:3f:fe:21:79:52:87:d2:55:0d:29:a1:f1: 09:0c:e8:cd:dc:2f:b2:52:6c:f6:bb:62:9c:71:84: 2c:88:0d:71:d4:1a:55:ef:a2:70:0b:5c:94:4f:f1: 08:f9:cb:df:16:1d:56:c1:1e:7a:83:f4:9f:6a:8c: 39:35:a4:9b:78:ca:d1:e7:a1:73:2c:4c:25:ee:52: 28:d0:4b:27:da:d2:c7:48:ad:69:81:20:02:2a:01: ad:be:d3:23:5e:d4:65:48:09:46:32:cb:9a:bf:fe: 9d:b9:df:7c:0d:cd:9c:70:a1:7e:7d:7d:69:35:a8: f6:bc:53:3a:7f:4e:f1:92:21:3e:f7:5a:ed:77:74: 08:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2C:6F:6C:77:2F:1C:94:0F:7E:E7:D9:4F:09:0A:93:7B:E9:D9:F7 X509v3 Authority Key Identifier: keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/B9574A322C1311F0B642882AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.122.52.0/24 202.37.80.0/22 IPv6: 2001:df6:8d00::/48 2401:42a0::/32 Signature Algorithm: sha256WithRSAEncryption 38:cd:c6:f1:f4:73:c8:78:32:c0:35:e7:cb:2d:ce:ae:02:de: 6c:7b:3b:ff:6e:3f:04:dd:55:a0:a3:22:da:8b:55:62:25:bf: 35:7b:1e:f0:77:d2:70:ae:9d:32:56:22:37:21:e9:4f:4b:af: d5:0a:b6:75:24:cd:5c:9f:e9:9c:d3:b8:14:6a:4c:c0:c5:0e: 7b:4f:25:16:d2:0e:80:c3:22:7d:28:39:b2:67:fb:f1:1e:75: cf:c7:e8:50:57:f3:2e:b8:9b:32:55:ce:11:9b:78:80:1f:fc: 06:e5:dc:2f:8d:66:3d:49:84:96:be:99:a3:06:e5:fc:d4:59: d8:2a:04:3b:2c:8c:03:05:85:a3:72:dd:a5:89:79:6a:c5:4a: 06:c4:2e:19:14:43:74:a2:3d:5e:c9:c3:71:25:bd:8e:dc:66: 2a:c4:e6:3e:86:88:92:b5:bc:5c:52:51:e3:f7:57:6a:42:ca: 9d:09:4f:d4:13:01:f0:41:4e:cb:eb:32:8f:67:1e:41:81:6c: 44:9b:45:52:cb:97:16:e5:fd:01:e5:fe:53:20:38:02:0d:9a: d5:90:3f:82:a9:95:9c:fa:50:4d:a8:d4:51:1a:18:64:1a:31: 24:a6:e6:87:8c:53:cb:33:e3:4e:85:6d:89:4d:3f:a7:12:29: 66:29:0b:87 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGOEQxMTAvBgNVBAUTKDJBMDFDOEZFOTY3OTY5NDQ3ODMxRUMwMUMwMkJDNEU5 Q0I5QUNFMkMwHhcNMjYxMDI3MDQ1MzEyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWUwMmUzOC04NzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqoKB1wajtcE+W2zRyFR7/R5A+4XgxbprHjGuRVztpCfF34aYTNDUDaA/Tmj 8bCSNZka5ANocRlA89ZYuvwmK1EJ0HxsFW5rKjn3NqgZQJXvQGHgjsKgond4Rv+H UtzE4QGs2i3GAQY2EMezRpdm2398j47AMicGdCI//iF5UofSVQ0pofEJDOjN3C+y Umz2u2KccYQsiA1x1BpV76JwC1yUT/EI+cvfFh1WwR56g/Sfaow5NaSbeMrR56Fz LEwl7lIo0Esn2tLHSK1pgSACKgGtvtMjXtRlSAlGMsuav/6dud98Dc2ccKF+fX1p Naj2vFM6f07xkiE+91rtd3QIowIDAQABo4ICfjCCAnowHQYDVR0OBBYEFE8sb2x3 LxyUD37n2U8JCpN76dn3MB8GA1UdIwQYMBaAFCoByP6WeWlEeDHsAcArxOnLms4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEY4RC9BMTc5RTUzQzY0 NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFVUjRNZXdCd0N2RTZjdWF6 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tnSElfcFo1YVVSNE1ld0J3Q3ZFNmN1YXppdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThGOEQvQTE3OUU1M0M2NDc3MTFFRkE4MkRFOTNEQzRGOUFFMDIvQjk1NzRBMzIy QzEzMTFGMEI2NDI4ODJBQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQAZ3o0AwQCyiVQMBYEAgACMBADBwAgAQ32jQADBQAkAUKgMA0GCSqG SIb3DQEBCwUAA4IBAQA4zcbx9HPIeDLANefLLc6uAt5sezv/bj8E3VWgoyLai1Vi Jb81ex7wd9Jwrp0yViI3IelPS6/VCrZ1JM1cn+mc07gUakzAxQ57TyUW0g6AwyJ9 KDmyZ/vxHnXPx+hQV/MuuJsyVc4Rm3iAH/wG5dwvjWY9SYSWvpmjBuX81FnYKgQ7 LIwDBYWjct2liXlqxUoGxC4ZFEN0oj1eycNxJb2O3GYqxOY+hoiStbxcUlHj91dq QsqdCU/UEwHwQU7L6zKPZx5BgWxEm0VSy5cW5f0B5f5TIDgCDZrVkD+CqZWc+lBN qNRRGhhkGjEkpuaHjFPLM+NOhW2JTT+nEilmKQuH -----END CERTIFICATE-----Generated at Tue Oct 27 23:02:29 2026 by rpki-client